Privacy Policy

Last updated: March 9, 2026

1. Information We Collect

Epic Advisory Group LLC ("CLAWVRR," "we," "us") collects information to provide and improve our MCP deployment services. We collect information in the following categories:

1.1 Information You Provide

  • Account registration data: name, email, company name, job title
  • Business information: industry, team size, current tools and workflows
  • Onboarding data: process descriptions, software stack, pain points, daily tasks
  • Payment information: billing address, payment method (processed via Stripe — we never store card numbers)
  • Communications: emails, support tickets, consultation notes

1.2 Information Collected Automatically

  • Usage data: token usage, API call volumes, tool invocation patterns (for optimization)
  • Log data: IP addresses, browser type, timestamps, error logs (for security and debugging)
  • Analytics: page views, feature usage (via Vercel Analytics — no ad tracking)

1.3 Information We DO NOT Collect

  • We do NOT sell your data to third parties — ever
  • We do NOT use your data for advertising or ad targeting
  • We do NOT train general AI models on your business data
  • We do NOT share your data with other clients or competitors

2. How We Use Your Information

  • To design, build, and deploy your custom MCP server(s)
  • To authenticate your access via bearer tokens
  • To monitor and optimize the performance of your deployed AI tools
  • To process payments and maintain billing records
  • To communicate with you about your account, services, and updates
  • To improve our platform, tools, and service quality
  • To detect and prevent fraud, abuse, or security threats
  • To comply with legal obligations

3. Data Sharing

We share data only with the following categories of recipients, and only to the minimum extent necessary:

  • Cloud infrastructure providers (hosting your MCP servers) — under data processing agreements
  • Payment processor (Stripe) — for transaction processing only
  • AI model providers (Google Gemini API) — for analysis tasks only, no persistent storage
  • Error monitoring (Sentry) — for debugging, anonymized where possible
  • Legal or regulatory authorities — when required by law or valid legal process

4. Data Retention

We retain your account data and MCP configurations for the duration of your service agreement plus 90 days. After termination, you may request a data export within 30 days. After the 90-day retention period, your data is permanently deleted from our systems and backups.

Aggregated, anonymized analytics data (no personally identifiable information) may be retained indefinitely for service improvement purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Correction: Request correction of inaccurate data
  • Right to Deletion: Request deletion of your data (subject to legal retention requirements)
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Opt-Out: Opt out of non-essential communications at any time

To exercise any of these rights, contact us at privacy@CLAWVRR.com. We will respond within 30 days.

6. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You may request disclosure of the categories and specific pieces of personal information collected, and request deletion of your data.

7. International Data Transfers

Your data may be processed in the United States. If you are located outside the U.S., by using our Services you consent to the transfer of your data to the United States, where data protection laws may differ from your jurisdiction. We implement appropriate safeguards for international data transfers.

8. Cookies & Tracking

We use essential cookies only — strictly necessary for authentication, session management, and remembering your preferences. We do NOT use advertising cookies, social media tracking pixels, or third-party analytics cookies that track you across the web.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients and posted on this page at least 30 days before taking effect. Continued use of the Services after changes constitute acceptance.

Privacy questions? Contact us at privacy@CLAWVRR.com